Use `state` GET parameter when authenticating with Facebook
Merge branch 'more-state-csrf-hashes' into hotfixes